Skip to content

Script output contains the password itself #18

@dxdlazarev

Description

@dxdlazarev
  1. Script version we use in a Jamf policy: https://github.com/jamf/FileVault2_Scripts/blob/master/reissueKey.sh
  2. If user has {, } symbols in a password or their combination (not 100% sure here, but both of our users affected and my test user pass contained both { (before) and } (after)). For the log bellow password was: {12345<abc{abC,abc}
  3. Both script output in a terminal and a Jamf Policy log have a cleartext password:
    Script result: Prompting dfilevault for their login password. missing close-brace while executing "send {{12345<abc{abC,abc}} send \r log_user 1 expect eof " Successfully Changed FV2 Key button returned:Close

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions